CVE-2012-5913: Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for W...

Security readout for executives and security teams

This is an old WordPress plugin issue where a login redirect parameter can carry attacker-controlled script or HTML. If a vulnerable site still runs WordPress Integrator 1.32, users could be exposed to browser-based attacks. The source bundle does not provide a score, patch status, or evidence of active exploitation. Likely exposure is limited to legacy WordPress installations using WordPress Integrator module 1.32. The source bundle does not identify additional affected versions, CPEs, current package status, or whether the module remains maintained. Treat this as a legacy exposure cleanup item, not a confirmed emergency. Prioritize internet-facing WordPress sites, especially abandoned or unsupported plugin stacks, because old XSS issues often persist unnoticed. Mitigation focus: Inventory WordPress sites for the WordPress Integrator module and version 1.32.; Remove or disable the module if it is no longer required.; Check vendor or project guidance for any fixed release or replacement..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.